News for hackers. Stuff that matters.

A comment on All extensions disabled due to expiration of intermediate signing cert. Parent comment

Re:All extensions disabled due to expiration of intermediate... by lmz on Friday May 03, 2019 @10:40PM (#19824013)
Because it's hard to tell the difference between "users" and "malicious software running on their computers".
[ Parent | on HN ]
Re:All extensions disabled due to expiration of intermediate... by Wowfunhappy on Friday May 03, 2019 @11:35PM (#19824274)
If the malicious software can adjust protected user settings, can't it also just inject into the Firefox process directly?

If there's a privilege level that allows for one but not the other, that sounds like something Mozilla should fix.

[ Parent | on HN ]
Re:All extensions disabled due to expiration of intermediate... by altfredd on Saturday May 04, 2019 @01:31AM (#19824646)
Fortunately, it is no longer necessary to run malicious software on user computers. With latest "advancements" in Firefox security everyone can publish malware directly in Firefox addon center [1]. No review needed!

"We accidentally uploaded all your HTTP requests to our servers, but we will definitely fix that in next addon version!~"

[1]: https://arstechnica.com/?post_type=post&p=1340459

[ Parent | on HN ]